diff --git a/cluster/applications/signal-cli/deployment.yaml b/cluster/applications/signal-cli/deployment.yaml
index c48a610..9c81c9d 100644
--- a/cluster/applications/signal-cli/deployment.yaml
+++ b/cluster/applications/signal-cli/deployment.yaml
@@ -10,7 +10,7 @@ metadata:
 spec:
   replicas: 1  # MUST be 1 - signal-cli state is not multi-instance safe
   strategy:
-    type: Recreate  # Prevents dual mount of PVC
+    type: Recreate  # Avoid PVC split-brain during updates
   selector:
     matchLabels:
       app.kubernetes.io/name: signal-cli-rest-api
@@ -18,8 +18,8 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: signal-cli-rest-api
-        app.kubernetes.io/component: messaging-gateway
     spec:
+      hostNetwork: true  # Use host network for Signal WebSocket connectivity
       containers:
       - name: signal-cli-rest-api
         image: bbernhard/signal-cli-rest-api:0.85  # Pin version, test upgrades